MakerDAO legacy ETH-A auction keeper drain — attacker addresses
- Scam type: Hack
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Reported: 2026-10-14
- Last updated: 2026-10-16
On 2026-10-06 (~06:13 UTC), an attacker drained 200 ETH (~$543K) of ETH-A collateral from a legacy third-party MakerDAO auction-keeper contract on Ethereum. Per CertiK incident analysis (https://www.certik.com/blog/makerdao-legacy-auction-keeper-incident-analysis): an unauthenticated keeper function allowed the attacker to obtain Vat delegation, settle four unsettled March 2020 'Black Thursday' lots (50 ETH each), and withdraw the collateral. Exploit tx: 0xbb6940f7c2a1e68cafbae7bb9b94d09af9af06ec3a114f6996f2cab993f3a88c. Proceeds were deposited to Tornado Cash. This was a third-party keeper…
Other addresses in this report: 0xec997d2ad033277913d6002277353368e8321dcf